Server data from the Official MCP Registry
Solana DeFi risk intel over x402: rug/honeypot scans, pool analysis, wash-filtered pools.
About
Solana DeFi risk intel over x402: rug/honeypot scans, pool analysis, wash-filtered pools.
Security Report
The soldefi-mcp server is a well-architected MCP tool that exposes Solana DeFi intelligence through x402 micropayment integration. Authentication and payment mechanisms are properly designed, with credentials stored in environment variables and not hardcoded. However, there are moderate-severity concerns around private key handling in error logging, lack of input validation on some parameters, and the inherent security risks of managing signing keys for automated micropayments. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
4 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: SOLANA_PRIVATE_KEY
Environment variable: EVM_PRIVATE_KEY
Environment variable: SOLANA_RPC_URL
Environment variable: SOLDEFI_BASE_URL
Environment variable: X402_NETWORK
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-thomenz-soldefi-mcp": {
"env": {
"X402_NETWORK": "your-x402-network-here",
"SOLANA_RPC_URL": "your-solana-rpc-url-here",
"EVM_PRIVATE_KEY": "your-evm-private-key-here",
"SOLDEFI_BASE_URL": "your-soldefi-base-url-here",
"SOLANA_PRIVATE_KEY": "your-solana-private-key-here"
},
"args": [
"-y",
"soldefi-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
soldefi-mcp
An MCP (Model Context Protocol) server that gives AI agents paid access to Solana DeFi risk intelligence — rug/honeypot scans, deep liquidity-pool analysis, and a wash-trade-filtered "real best pools" ranking. Each paid call settles an x402 micropayment in USDC (on Solana or Base) automatically, using a wallet you configure. A call is charged only on success — malformed input is rejected for free.
It talks to the hosted Solana DeFi Intelligence API
(https://soldefi.thomenz.me by default). This package is a thin payment-client
bridge; the intelligence runs server-side.
Tools
| Tool | Price | What it does |
|---|---|---|
scan_honeypot | $0.005 | Rug/honeypot scan of an SPL token by mint: mint/freeze authority renounced?, Token-2022 transfer tax, top-holder concentration, and a live Jupiter buy→sell round trip as a strong signal the token is sellable at scan time (catches most honeypots). Returns a 0–100 risk score + AVOID/CAUTION/LOW RISK verdict. |
analyze_pools | $0.015 | Deep liquidity-pool analysis across Raydium/Orca/Meteora/pumpswap: real fee APR, wash-trade risk, age, TVL, a token rug verdict, and a real Jupiter slippage ladder ($100/$1k/$10k). Recommends the best risk-adjusted pool. |
top_pools | $0.02 | The real best Solana DEX pools — wash-traded/fake-volume pools filtered out, the rest ranked by risk-adjusted fee yield, with an excluded list of what was dropped and why. |
check_lp_status | $0.005 | Liquidity durability / rug-pull exposure: pools (TVL, age, DEX), largest-pool depth, burned-supply share, and whether mint/freeze authority is still live. Returns a 0-100 liquidity-risk score + verdict (DURABLE/SHAKY/FRAGILE/RUG-PRONE). |
check_deployer | $0.01 | Deployer reputation: creator wallet address, creator's remaining holding %, wallet age, and token age. Verdict flags fresh wallets, heavy insider holding, and brand-new tokens. |
can_i_sell | $0.003 | Real-time sellability check at YOUR size: simulates exiting a specific USD amount of a Solana token via a live Jupiter buy→sell round trip and reports USDC recovered, real sell price impact, and tax/friction loss. |
check_exit_risk | $0.015 | Can I get out, and at what cost? Crosses Birdeye smart-money flow (whale net buy/sell 24h, bundler/sniper manipulation tags, 1h sell-pressure, holder count) with a live Jupiter exit-slippage ladder ($1k/$10k) → LOW/ELEVATED/HIGH exit-risk. The sellability wedge: are whales dumping into a thin book that traps you? |
full_scan | $0.03 | One-call full workup: bundles honeypot + LP durability + deployer + exit-risk into a single verdict with an aggregated overall {riskScore, riskLevel, verdict, topFlags} — cheaper than buying the four separately (~$0.035). |
scan_wallet_risk | $0.03 | Portfolio rug scan: reads a wallet's SPL holdings and runs the full honeypot/rug scan on each (up to 10 positions), returning per-token risk and which mints to exit. |
scan_honeypot_batch | $0.02 | Batch rug/honeypot scan: submit up to 10 Solana token mints and get the full per-token honeypot verdict for each in one paid call (cheaper than scanning individually). |
build_guarded_swap | $0.001 + 0.5% | Build a ready-to-sign Jupiter swap with the rug check in front: a critical verdict on the token you are BUYING returns the verdict and no transaction. Returns an UNSIGNED versioned transaction — your wallet signs, this service never custodies funds. The 0.5% platform fee applies only when SELLING into USDC/SOL (buying is fee-free) and rides inside the transaction you sign. |
validate_mint | free | Local base58 mint-address format check. No payment. |
Install & configure
Add it to your MCP client (Claude Code, Claude Desktop, …). Only a paying wallet is required — everything else defaults to production.
{
"mcpServers": {
"soldefi": {
"command": "npx",
"args": ["-y", "soldefi-mcp"],
"env": {
"SOLANA_PRIVATE_KEY": "<base58-or-JSON-array secret key of a DEDICATED Solana wallet holding USDC>"
}
}
}
}
You can pay on Base instead of (or in addition to) Solana by setting
EVM_PRIVATE_KEY (0x…). If both are set, the x402 layer uses whichever rail
the server's payment challenge advertises.
Environment
| Var | Default | Notes |
|---|---|---|
SOLANA_PRIVATE_KEY | — | base58 or JSON-array secret key (32 or 64 bytes) of the paying Solana wallet. |
EVM_PRIVATE_KEY | — | 0x-prefixed key of the paying Base wallet. |
SOLDEFI_BASE_URL | https://soldefi.thomenz.me | Point at your own Worker if self-hosting. |
X402_NETWORK | base | base (mainnet → Solana mainnet) or base-sepolia (testnet → Solana devnet). |
SOLANA_RPC_URL | — | Optional RPC used to build the Solana payment (e.g. a Helius URL). Public default otherwise. |
🔐 Security: these keys control real funds. Use a dedicated wallet with a small balance, never a personal/treasury key. Anything that can read this process' environment can spend from it.
The wallet needs
- A little USDC on the chosen chain to pay per call.
- On Solana, a tiny bit of SOL is not required for the payment itself (the facilitator sponsors the transaction fee), but the receiving side must have a USDC token account — which it does on the hosted service.
Develop
pnpm install
pnpm --filter soldefi-mcp build # tsc → dist/
SOLANA_PRIVATE_KEY=… pnpm --filter soldefi-mcp dev # run from source
License
MIT
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.